07/23/2007 19:33 FAX 



Rgceiveo 

CENTRAL FAX CENTER 

JUL 2 3 2007 



Dooi 



AP32610- 0728 17.01 52 



IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 
BEFORE THE BOARD OF PATENT APPF.AT S i awi rar m KWENCBfl 



On Appeal to the Board of 
Appeals and Interferences 



Appellants) 
Serial No. 
Filed 
Title 



Ezawa ct a\ t 
09/528,315 
July 25 7 2000 



Examiner: 
Group Art Unit: 



Aravind K_ Moorthy 
2131 



SYSTEM AND METHOD FOR COMMUNICATING BETWEEN 
SMART CARDS 



APPEAL BRIEF 



I hereby certify that this paper addressed to: Commissioner for Patents 
P.O. Box 1450, Arlington, VA 22313-1450 is being via facsimile to the 
United States Patent and Trademark Offic* nt 57U273-8300 on the date 
nelnw: 



_July_23 1 2007__ 
Date of Deposit 



Manu J Tejwani 




37.952. 



Registration No. 



July 23, 2007 
Date of Signature 



NW:.W)504J 



PAGE 1/35* RCVD AT 7/23/2007 7:40:48 PM [Eastern Daylight Time]' SVR:USPTO-EFXRF-5/14 * DNIS:2738300 • CSID: * DURATION (mnrt-ss):03-18 



07/23/2007 19:34 FAI 0002 



A31906-A-070457.H 95 

TABLE OF CONTTriy-re 

I. REAL PARTY IN INTEREST 2 

H- RELATED APPEALS AND INTERFERENCES 3 

III. STATUS OF CLATMS 

4 

IV. STATUS OF AMENDMENTS 5 

V. SUMMARY OF CLAIMED SUBJECT MATTER 6 

VI. GROUNDS FOR REJECTION TO BE REVIEWED ON APPEAL ] 1 

VH. ARGUMENT 

.12 

VII. ARGUMENT 

A ' 2" M H" S ; C § 1 12 First Par Wh Rejection Of Claims 1-58 
Should Be Reversed 

b. The Reactions Under 35 U.sZ§'l02(b) b^'fon C^in^Sh^id 
be Reversed 

t. Relevant Case Law 

: 13 

2, Miguro Does Not Disclose "If . , . , Device" } 4 

VIII. CLAIMS APPENDIX 

IX. EVIDENCE APPENDIX 

' 30 



X. RELATED PROCEEDINGS APPENDIX. 



.31 



NYOZ;!»Jirw.i 



ii 



PAGE 2/35 * RCVD AT 7/23/2007 7:40:48 PM [Eastern Daylight Time] * SVR:USPTO-EFXRF-5/14 * DNIS:2738300 * CSID: * DURATION (mm-ss):08-18 



07/23/2007 19:34 FAX 



11003 



A31906-A-070457.1195 

TABLE OF AUTHORITIES 
CASES 

^ ra ^ ff ^^^^^^^Cft v. Johnxon & Johnson Orthopedics Inc 

976 F.2d 155% 24 U.S.P.Q.2d 1321 (Fed CiV. 1985) „. 8 

Verdegaal Bras, v. Union Oil Co, of California 

814 F,2d 628, 2 US.P.Q.2d 1051* (Fed. Cir. 1987) g 

In re Saunders, 

F.2d 599, 602-03, 170 U.S.P.Q. 213, 444 (C.C.P.A, 1971) g 

Richardson v. Suzuki Motor Co., 

868 R2d 1226. 1236, 9 VSPQ2d 1913, 1920 (Fed. Cir. 1989) 9 

In re Bond, 

910 R2d 831, IS JJSPQ2d 1566 (Fed Cir 1990) 9 



STATUTES 

35U.S.C. § 102(b) 

37 C.F.R. §41.37 



NY03:5P1S04J 



iii 



PAGE 3/35 * RCVD AT 7123/2007 7:40:48 PM [Eastern Daylight Time] * SVR:USPTO-EFXRF*5/14 * DNIS:2738300 * CSID: * DURATION (mm-ss):08-18 



07/23/2007 19:34 FAI 



RECEIVED 
CENTftAL FAX CENTER 

JUL 2 3 2007 

A319G6-A- 070457.1195 

IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 
BEFORE THE BOARD OF PATENT apptt a LS AN p INTERFERENCES 



@004 



On Appeal to the Board of 
Appeals and Interference 



Appellants) 
Serial No. 
Filed 
Tide 



Ezawa et al. 
09/628,315 
July 28, 2000 



Examiner: 
Group Art Unit: 



Aravind K. Moorthy 
2131 



SYSTEM AND METHOD FOR COMMUNICATING BETWEEN 
SMART CARDS 



APPEAL BRIEF 



Commissioner fbr Patents 
U.S. Patent and Tmriranark Office 
P.O. Box 1450 
Alexandria. VA 223 13-J450 

Sir: 

On May 22, 2007, Appellants filerf a Notice of Appeal from the final rejection of 
more, ft™ twke-rejected claims 1-58 contained in the Office Action dated on February 22, 2007. 
The U.S. Patent and Trademark Office reoeived the Notice of Appeal nn February 22, 2007. 

Applicants hereby timely submil, pursuant to 37 C.F.R. § 41.37, an Appeal Brief 
in Support of the appeal of tfv. rejection of pending claims 1-58. 
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I. REAL PARTY TN INTEREST 

The real party in interest is MasterCard International incorporated, 2000 Purchase 
Street, Purchase, New York 10577-2509 ("MasterCard") by virtue of purchase agreement with 
MONDEX INTERNATIONAL LIMITED assignee of the entire right, title, and interest in the 
present application by virtue of the Assignment dated July 25, July 26 and July 27, 2000,which 
was recorded on October 2, 2000 at Reel 1 140 Frame 0006. 
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B. RELATED APPEALS AND INTERFERENCES 

Appellants and the Appellants' legal representatives are unaware of any appeala 
or interferences related to the present application, which will directly affect or be directly 
affected by or have a bearing on the Board's decision in the pending appeal. 
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Uh STATUS OF CLAIMS 

Claims 1-58 stand rejected under 35 U.S.C. § 1 12, first paragraph as failing to comply 
with the written description requirement. 

Claims 1-44 and 46-58 stand rejected under 35 U.S.C, § ] 02(h) w being anticipated by 
Ishiguro et al. U.S. Patent No, 5,502,765 ("Ishiguro"). Claims 4 and 45 stand rejected under 35 
US.C. § 103(a) &s being obvious form Ishiguro in view of Carlisle et al. U,S. Paterrt No. 
5,649,113 ("Carlisle")* 

Claims 1-58 are nowonjj^v^L 
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IV. STATUS OF AMENDMENTS 

Appellants have Sled no further amendments to the claims subsequent to the 
issuance of the Final Official Action dated February 22, 2007. 
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V. SUMMARY OF CLAIM F ( n SUBJECT MATTER 

Appellants' invention provides systems and methods for direct but secure transactions 
between smart cards (or other portable devices) without the. need for accessing a host system to 
verify or authenticate process parameters such as time. According to applicants' invention, each 
smart card is embedded with its own trusted time clock, reference or parameter, (ftec e.g., 
specification page 5, lines 14-20). The embedded trusted time parameter may be hashed or 
otherwise represented by a sequence of numbnrs. 

Independent claims 1, 25, 32, 37, 41, and 54 arc dieted to the inventive systems and 
methods. All of these independent claims 1, 25, 32, 37, 41, and 54 require key-secured 
communication Hrtwcen two smart cards to mutually update information based upon a 
comparison of trusted times that are embedded in each of the two smart cards. (See e.g., 
specification, page 18, lines 19-26.) 

Written support for independent claims 1 , 25, 32, 37, 41, and 54 may be found in the 
specification as indicated below: 

1 . A melhod for communicating between a first portable device hnving a first storage device 
and a second portable device having a second storage device, the first storage device storing 
thereon a first (sequence number and a first key, the second storage device storing thereon a 
second fritted time and a second key, wherein the first and sccmuf sequence numbers comprise 
information on a first and a second trusted timr embedded in the respective storage devices, the 
method comprising the steps of: 

comparing the first sequence number to the second sequence number including 
comparing the embedded first and second trusted times; 

performing a verification using the first and second keys; 

if the second sequence number is newer than the first sequence number by 
comparison of the respective enfolded first and second trusted times, setting the first sequence 

-6- 
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number to have a value nf ihr. second sequence number if the verification succeeds; and 
conversely, 

if the first sequence number is newer than the second sequence number by 
comparison of the respective embedded first and second trusted times, setting the second 
sequence number to have a value of the first sequence number if the verification succeeds so rhaT 
the older trusted time information embedded on nnrs of two portable devices is mutually replaced 
with the newer misted time information embedded on the other portable device [See e.g., 
specification, page 18, lines 19-26]. 

75. A portable device which is capable of performing a transaction with a forth cr portable 
device, comprising: 

a storage device storing a first sequence number and a first key wherein the first Bequence 
number comprises information on a first trusted time embedded in the storage device; and 
a processing device performing the following steps: 

receiving a second sequence number and a second key from the further portable 

device, wherein the second sequence number comprises information on a second 

trusted time embedded in the further portable device, 

comparing the first sequence number to the second sequence number including 
comparing the embedded first and second trusted times; 

performing a verification using the first and second keys; 

if the second sequence number is newer than the first sequence number by 
comparison of the respective embedded first and second, trusted times, setting the first sequence 
number to have a value of the second sequence number if the verification succeeds; and 
conversely, 

if the first sequence number is newer than the second sequence number by 
comparison of the respective embedded first and second trusted times, setting the second 
sequence number to have a value of the first sequence number if the verification succeeds so that 
the older trusted time information embedded on one of two portable devices is mutually replaced 
with the nftwrr trusted time information embedded on the other portable device[&?e e.g.. 
specification, page 18, Urns 19-26].. 

-7- 
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32. A method for determining an approximate cun-cut time using a first portable device arid a 
second portable device, rtiR first portable device having a first storage device, the second portable 
device having a second storage device, the first storage device storing thereon, a first sequence 
number the second storage device storing thereon a second sequence number, wherein the first 
and second sequence numbers comprise information on a first and a second trusted time 
embedded in the respective storage devices, die method comprising the steps of: 

comparing the first sequence number to the second sequence number, the first 
scquennc. number being indicative of a the first trusted time provided on the first portable 
device, the second sequence number being indicative of a the second trusted time provided on 
the second portable device; and 

if the first trusted time is older than the second trusted time, setting the first 
sequence number to have a value of the second sequence number and conversely, 

if the second trusted time is older than the first trusted time, setting the second 
sequence number to have a value of the first sequence number so that the older misted time 
information embedded on one of two potable devices is mutually replaced with the newer 
trusted time information embedded on the other portable device [&e specification, po$* ) 8, 
Urns 19-26].. 

37, A portable device which is capable of determining an approximate current time during a 
enmmunication with a fiirther portable device, comprising; 

a storage device storing a first sequence rtumh^r wherein the first sequence number 
comprises information on a first trusted time embedded in the storage device; and 
a processing device performing the following: 

receives a second sequence number from the further portable device number 
wherein fl>c second sequence number comprises information on a second trusted 
time embedded in the further portable device, 

compares the first sequence number to the second sequence number, the first 
sequence number being indicative of A the first trusted time provided on the 
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portable device, the second sequence number heing indicative of a-thft second 
trusted time provided on the further portable device, and 
executes one of the following actions: 

if ihr. first tm$fcd time is old er than the second trusted time, sets the first 
sequence number to have a value of the second sequence number; and 
conversely, 

if the second trusted time is older than the first trusted time, sets the 
second sequence number to have a value of the first sequence number so 
that the older trusted time information embedded nn n.nc of twn portable 
devices 3s mutually replaced with the newer trusted time information 
embedded on the other portable device [See e.g., specification, page I8 t 
lines 79-2fl,. 

41 . A method for determining an approximate current time using a first portable device and a 
.■sctopcJ portable device, the first portable device having a first storage device, the second portable 
device having a second storage device, the first storage device storing thereon a first sequence 
number and a first key. the second storage device storing thereon a second sequence number and 
a second key, wherein the first and second sequence numbers comprise information on a first and 
a second trusted time embedded in the respective storage devices, the method comprising the 
steps of: 

comparing the first sequence number to the second sequence number, the first 
sequence number being indicative of a the first trusted time provided on the first portable devices 
the second sequence number being indicative of a the second trusted time provided on the second 
portable device; 

if the second trusted time is newer than the first trusted time, performing a 
verification using fit least one of the first and second keys; and 

setting the first sequence number to have a value of the second sequence numbor 
if the verification succeeds; and conversely, 

if the first trusted time is newer than the second trusted time, performing a 
verification using at least one of the first and second keys; and 

.9. 
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setting ihe second sequence number to have a value of the first sequence number 
if the verification succeeds so that the older trusted time information embedded on one of two 
portable devices is mutually replaced with the newer trusted time information embedded on the 
other portable device [See e.g . specification, page }R, linen J9-26].. 

54. A portable device which is capable of determining ah approximate current time during a 
communication with a further portable device, comprising* 

a storage device storing a first sequence number and a first key wherein the first sequence 
mimbcT comprises information on a first trusted time embedded in the storage device; and 
a processing device performing the following: 

receives a second sequence number and a second key from the flirther portable 

dfcvtee. wherein the second sequence number comprises information on a second 

trusted time embedded in the further portable device, 

compares the first sequence number to the second sequence number, the first 

sequence number being indicative of the first trusted time provided on the 

portable device, the second sequence number being indicative of the second 

trusted time provided on the further portable device, 

if the second trusted time is newer than the firsf rm^ted time, performs a 

verification using the first and second keys, and sets the first sequence number to 

have a value of the second sequence number if the verification succeeds; and 

conversely, 

if the first trusted time is newer than the second trusted time, performs a 
verification using the first and second keys, and sets the second sequenoe number to have a value 
of the first sequence number if the verification sunceeds^so lhat the older trusted time 
information embedded on one of two portable devices is mutually replaced with the newer 
trusted time information embedded on tht orthfrt- portable dcvice[tfee e.g., specification, page 18 t 
lines I9-2G].. 
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VI. GROUNDS OF REJECTION TO BF, RFVTFAVET) ON APPEAL 

The rejection of claims 1 -44 and 46-58 under 35 U.S.C. § 102(b) as being anticipafftf by 
Ishiguro etal. U.S. Patent No. 5,502,765 ("Ishiguro"). 
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VTL ARGUMENT 

A. The 35 U.S.C. § 112 First Paragraph Rejection Of Claims 1-58 Should 

Be Reversed. 

The Final Office Action mistakenly states that there is no support, for the daiwid 
limitation "so that the older trusted time information embedded on [either] one of the two 
portable devices is mutually replaced with the newer trusted lime information embedded cm the 
other portable device". (See Office Action dated February 22, 2007, page 3), 

In the previous Reply, Appellants have noted support for the claimed limitation at 
specification page 18 fines 26. Tn particular, the cited portion of the specification reads: 

" If the aecond sequence numbera of the first and second carda 300. 350 arc not 
equal, in step 420. it is determined (by the first card 300 and/or the second card 350) iilhfi 
Q^ond^eguejnc^ 

number SEQlb of the first card 300, Le,> the time of the second card 350 is older than the time of 
the first card 300. If so, the [OLDER] second sequence number SEQ2b of the second card 350 is 
iet to have the [NEWER] value of the second sequence number SEQlb of the first card 300 (step 
430), Otherwise. [Le. conyerse|v. if tfre soon^d sequence number SEQ2b of the second card 350 
is newer than the aecond sequence number SEP lb of the first card 300 ] the [OLDER] second 
sequence number SEQlb of the first card 300 is set to have the value of the [NEWER] second 
sequence number SEQ2b of the second card 350 (step 440).*' 

(underlining and parenthetical comments added for emphasis). (Sec also specification FIO. 4) 
Appellants submit that this portion of the text is readily understood by a person 

-12- 
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skilled to the art as an exchange or replacement of the older time on cither card with the newer 
time nn the nfher card. At least this portion of the specification provides explicit written suppm* 
for the claimed limitation 'So that the older trusted time information embedded on one of two 
portable devices is mutually replaced with the newer trusted time information embedded on the 
other portable device^' 

B. The 35 U.S.C § 102(b) Rejection* Ra^H On Ishiguro Should Be 

Reversed 

The Final Office Action rejects claims 1-44 and 46-58 under 35 U.S.C. § 102(b) aa being 
anticipated by Ishiguro. The anticipation rejection is incorrect and should be reversed. 
1- Relevant Case Law 

To establish an anticipation rejection, the oited reference mm* teach every element of the 
claimed invention. 35 U.S.C. § 102(b) states, in pertinent part, that "[a] person shall be entitled 
to a ptant unless "the invention was patented or described in a printed publication in this or a 
foreign country or in public use or on sale in this country, more than one year prior to the date of 
the application for patent in the United States." A patent claim is anticipated under Section 102 
i£ among other things, "identity of invention" is shcrwn. Minnesota Mining and Manufacturing 
Co. v. Johnson & Johnson Orthopedics, Inc., 976 F.2d 1559, J 5(55. 24 U.S.P.Q.2d 1321 (Fed. 
Cir. 1935). In finding identity of invention, one "must show that each element of the claim in 
issue is found ... in a single prior art reference," Id. The Federal Circuit has held that, "[a] 
claim is anticipated only if each and eveTy etament as set forth in the claim is found, either 
expressly or inherently described, in a single prior art reference." Verdegaal Bros, v. Union Oil 
Co. of California, 814 R2d 628, 631, 2 US.P.Q.2d 1051 (Fed. Cir. 1987). Moreover, "[a] prior 
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art publication cannot be modified by the knowledge of those skilled in the art for purposes of 
anticipation." In re Smndtrx. F.2d 599, 602-03. 170 U,S.P.Q. 213, 444 (C.C.F-A. 1971). "The 
identical invention must be shown in as complete detail as is contained in the ... claim:* 1 
Richardson v. Suzuki Motor Co., 868 F.2d 1226, 1236, 9 USPQ2d 1913, 1920 (Fed. Cir. 1989). 
The elements must be arranged as required by the claim. In re Bond, 91 0 F.2d 831,15 USPQ2d 
1566 (Fed. Cir. 1990). 

2. Ishiguro Does Not Disclose "If The Second [First] Sequence Number I* 
Newer ♦ • , Setting The First [Second] Sequence Number To Have A Vain* Of The Second 
[First] Sequence Number ... So That The Older Trusted Tnnr. Information Embedded On 
One Of Two Portable Devices Is Mutually Replaced With The Newer Trnated Time 
Information Embedded On The Other Portable Device" 

Applicants' claim 1 relates to a method for communicating between a first and a 
second portable devices. The first and second portable devices have embedded thereon first and 
second sequence numbers comprising information on a first and a second trusted time, 
respectively. The method of claim 1 includes the steps of: 

comparing the first sequence number to rfoe second sequence number including 
comparing the embedded first and second trusted times', 

* * >> 

if the second sequence number is newer . . . setting the first sequence number to 
have a value of the second sequence number . . and conversely, 

if the first sequence number is newer . . . setting the second sequence number to have a 

value of the first sequence number . . . 

so that the older trusted time information embedded on one of two portable devices is 

mutually replaced with the newer trusted time information embedded on.rhe other portable 

device. 
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Ishiguro does not describe or teach any auch two-way mutual updating of the older time 
with the newer time information. 

The Final Office Action mistakenly cites Ishiguro col, 16 line 1 1 to col, 17 line 16 
as describing the combination of the "if-then" steps of claim 1 . (See Office Action page 4 test 
line, page 5 lines 6). Appellants note that careful rending of the cited portion does reveal any 
teaching nf "if the second sequenc e number is newer , . . setting the first sequence member to 
have a value of the second sequence number . and conversely, 

iftho first sequence number is newer , . , setting the second sequence number to have a 

value of the first sequence number . . 

Appellants submit that any teaching of updating time in Ishiguro is at most ohp- 
way (i.e., host to device), Ishiguro does not show or teach the two-way mutual updating of 
trusted inforrwiticTn between two portable devices a$ described In claim 1. 

Further, the Final Office Action page 2 § 4 mistakenly asserts that to Ishiguro col. 
15 lines 16-53 teaches "so that the older trusted time information ^bedded on one of two 
portable devices is mutually replaced with the newer trusted time information imbedded on the 
other portable device." Appellants note that the cited portion at most teaches " the time stamp 
. set in. respective TC card terminal 2 is independently updated." There is no teaching of 
"mutual" updating between twn portable devices. 

Thus, I$hifuro does not show or teach the pair nf "if-then" elements and the "so that' 
element of claim 1. For at least this reason, I$higuro does not anticipate claim 1. Therefore, the 
rejection of claim 1 (and dependent claims) under 35 U,S,C. § 1 02(b) should he reversed. 

Appellants' claims 25, 32, 37, 41, and 54 include the same or similar "if-then" 
and so that" limitations nf claim 1 discussed above. The arguments relating to claim I, set out 
above, are equally applicable to claims 25, 32, 37, 41, and 54, and thus the rejection of claims 
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25, 32, 37, 41, and 54 (and their dependent claims) under 35 U.S.C. § 102 should likewise be 
reversed. 
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VTTT. CLAIMS APPENDIX 

The rejection of the following claims is appealed. 

1 . A method for communicating between a. first portable device having a first storage device 
and r. second portable device having a second storage device the first storage de-vioe storing 
thereon a first sequence number and a first key, the second storage device storing thereon a 
second trusted time and a second key, wherein the first and second sequence numbers comprise 
information on a first and a second trusted time embedded in the respective storage devices, the 
method comprising the steps of: 

comparing the tlrsf. sequence number to the second sequence number including 
comparing the embedded first and second trusted times; 

performing a verification using the first and second keys; 

if the second sequence number is newer than the first sequence number by 
comparison of the respective embedded first and second trusted times* setting the first sequence 
number to have a value of the second sequence number if the verification succeeds; and 
conversely, 

if the first sequence number is newer than the second sequence number by 
comparison of the respective embedded first and second trusted times, setting the second 
sequence number to have a value of the first sequence number if the verification succeeds so that 
the older trusted time information embedded on one of two portable devices is mutually replaced 
with the newer trusrtcd time information embedded on the other portable device. 

2. The method according to claim 1, wherein the first key is a first global signing key, and 
thft *nnond key is a second global signing key, and wherein the verification is performed by 
comparing at least one first portion of the first global signing key to at least one second portion 
of the second global signing key. 

3. The method according to claim 2, wherein the verification succeeds when the at least one 
first portion corresponds to the at least one second portion. 
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4. The method according to claim 2 } wherein each of the first and second global signing 
keys includes a private key and a puHrc key, and wherein the verification is performed using the 
respective public keys. 

5. The method according tn claim 1 , herein the first portable device is a first card, and the 
second portable device is a second card, and further comprising the step of: 

after the setting step, performing a transaction between the first card and the 

second card , 

5. The method according to claim 1, wherein the first portable device is a first card, and the 
second portable device is a. second card, and further comprising the step of: 

if the verification fails, suspending a transaction between the first caid and. the 

second card, 

7. The method according to claim 1 , further comprising the step of: 

if the verification fails, recording a failure of the verification in at least one of the 
first storage device and the second storage device. 

8. The method according to claim 1, wherein the first portable device is a first card, and the 
second portable device is a second card, and further comprising the step of: 

if the first sequence nurnhcr and the second sequence number are equal, 
performing a transaction between the first card and the second card. 

9. The method according to claim 1, wherein the first portable device is a first card, and the 
second pfwta.Hr device is a second card, wherein the setting step is performed by transmitting an 
authenticated system message ("ASM") command from the second card to the first card, and 
wherein at least one of the first and second cards sets the second Sequence number. 
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10. The method according to claim 1 , wherein the first portable device is a first card, and the 
second portable device is * second card, and wherein the first storage devir* stores a third 
sequence number thereon, wherein the second storage device stores a fourth sequence number 
thereon, and further comprising the steps of: 

ifthc first sequence number and the second sequence number are equal, 
dctcrrnining Aether the third sequence number commands to the fourth sequence number; and 

if the third sequent* number does not correspond to the fourth sequent number, 
transmitting an authenticated system message ("ASM") command from a particular card of the 
first and second cards having a newer number of the third and fourth sequence numbers to 
another card of the first and second, cards. 

11. The method according to claim 1 0, wtwrein the ASM command is transmitted without 
setting the first sequence number to have the value of the second sequence number. 

12. The method according to claim ) 0, further comprising the step of: 

if the third sequence number corresponds to the fourth sequence number, 
panning a transaction between the first card and the second "card. 

.13. The method according to claim 1, wherein the first key is a first global signing key, and 
the second key is a second global signing key, and wherein the first global signing key relates to 
the first sequence number, and the second global signing key relates to the second rcquence 
number. 

14. The method according to claim 1, wherein the first key is a first global signing key, and 
the second key is a second Rlobal signing key, and wWii the first global signing key is 
associated with a first value transfer pmtr^l ("VTP") key, and the second global signing key is 
associated with a second VTP key, the first VTP key being stored in the first storage device, the 
second VTP key being stored in the second storage device. 
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15. The nwrfbod according to claim 1, wherein mich of the first portable device and the 
seennd portable device includes a processing device. 

1 6. The. method according to claim 1, further enjuprising the steps of: 

receiving an authenticated system message which includes a command; and 
executing the command. 

17. The method according to d«m 1, wherein the feat portable device is a first card, and the 
second portable device is a second card, and further comprising the step of: 

providinft an application to * least one card of the first and second cards, the 
application is provided for at least one of: 

renewing a security feature of the at least one card, and 
updating a security sc heme of the at tat one card on-chip risk 

management. 

18. TherrremodacMrdingtoclai^ 

providing areferencepohit for timeto tle^tona of the first and second portable 
devices from a central command arrangement. 

] 9. The method according to the claim 1, further comprising the steps of: 

enabling a selective targeting of at least one device of the first and second 
portable devices; and 

applying re-customization procedures on rhe at least one device. 

20. The method according to the claim 19, further comprising the step of: 

selecting a particular response by the a t least one device when a predetermined 

criteria is met. 

21. The method according to claim 1. wherein the first key is a fi rst gfcbal signing key, and 
the second key is a second global signing key, and wherein the verification is performed by 
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company cryptograms which are related to the first global signing key and the second global 
signing .key. 

22. The method according to claim 20, further comprising the steps of: 

generating the cryptogams by one of the first portable device and the second 
portable device; and 

verifying the cryptograms using another one of the first portable device and the 
second portable device. 

23. The method according to claim 20, wherein the cryptograms are gen^ted by a central 
authority. 

24. The method according to claim I. wherein the first portable device is a first card, and th* 
second portable device is a seennd card, and further comprising the step of: 

after the setting step, modifying stored parameters of at least one of the first and 
second cards to at least one of stipend, permit and modify subsequent operations between the 
first and second cards or other cards. 

25. A portable device which is capable of performing a transaction with a further portable 

device, comprising: 

a storage device storing a first sequent number and a first key wherein the first sequence 
number comprises information on a first trusted time embedded in. the storage device; and 
a processing device performing the following steps: 

receiving a second sequence number and a second key from the further portable 
device, wherein the second sequence number comprises information on a seeond 
trusted rime embedded in the further portable device, 
comparing the first sequence number to the second sequence number including 
comparing the embedded first and second trusted times; 

performing a verification using the first and second keys; 
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if the second sequence number is newer than the first sequence number by 
comparison of the respective embedded firs, and second txuated time, setting the first sequence 
number to have a value of the second sequence number if the verification succeeds; and 

convened 

if the first sequence number is newer than the second sequence number by 
comparison of ftp respective embedded firat and *ccnnd trusted times, setting the second 
seance number to have a value of the first sequence number if the verification succeeds so that 
the older trusted time information embedded on one of two portable devices is mutually replaced 
with the newer trusted time information embedded on the other portable device. 

26. The portable devin, according to claim 25, wherein, if the verification fails, the 
precede device suspends the tr faction with the further portable device, and records a failure 
of the verification. 

27. Tie portable device according to claim 25, wherein, if the first sequent* number and the 
second sequence number arc ,qual, the processing device perform, the transaction with the 

further portable rfrvicc. 

28. The portable device according to claim 25, wherein the storage device stores a third 
sequence number thereon, and wherein the processing device performs the following: 

if the first sequence nvenber and the second sequence number are equal, and 
determines whether the third sequence numb* corresponds to a fourth sequence 
number of the further portable device. 

29. The portable device according to claim 28, wherein, if the third sequence number 
corresponds to the fourth sem^c* numbcr> thc ^ ^ ^ ^ 
the further portable device. 

30. The portable device according to eWm 25, wherein the portable device is a smart card, 
and wherein the further portable device is a further smart card. 
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31. The portable device according to cWm 25, wherein the first key is a global signing key, 
and wherein the second key is a second global signing key. 

32. A method for determining an approximate currenttime using a fir* portable device and a 
second portable device, the first portable device having a ft* storage device, the second portable 
dev.ee living a secoad storage device, the first storage device storing thereon * first sequence 
number, the second borage device storing thereon a second sequence number, wherein the first 
and second sequence numbers comprise information rm a first and a second trusted time 
embedded in the respective storage devices, tfe method comprising the steps of: 

comparing the first, sequence number to the aecond sequence number, the first 
sequence number hdng indicative of. the first trusted time provided on the fiat portable 
device, the second sequence number hemg indicative of a the second trusted rime provided on 
the second portable device; and. 

if the first trusted time is older than the second trusted time, setting the first 
sequence number to have B value of the second sequence number and conversely, 

if the second trusted time is older than the first trusted time, setting the second 
sequence number to have a value of the first sequence number so that the older Inrsted time 
information embedded on one of two portable devices is mutually replaced with the newer 
trusted time information embedded on the other portable device. 

33. The method according to claim 32, further comprising the step of: 

if the second time is older than the first time, setting the second sequence number 
to have a value of the first sequence number. 

34. The method according »o claim 33, further comprising the step of: 

after the setting step and if the ft* time is not equal to the second rime, executing 
an acton which is tigered by at least one of the first sequence number and the second sequence 
number 
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35. The method according to claim 34, wherein, the first portable device is a first card, and 
the second portable device i 3 a second mrd, and further comprising the step of: 

after the executing step and if the first time is not. equal to Hie second time, 
performing a transaction between the first card and the second card. 

36. The method according to claim 32, wherein the first portable device is a first card, and 
the second portable device is ft aecond card, and further comprising the step of: 

if the first time is equal to the second time, performing a transaction between the 
first card and the second card. 

37. A portable device which is capable of determining an approximate current time during a 
communication with a further portable device, comprising: 

a storage device storin 8 a first sequence number wherein the first sequence number 
comprises information on a first trusted time embedded m the storage device; and 
a processing device performing the following: 

receives a second sequence number from the further portable device number 
wherein the second sequence number comprises information on a second trusted 
time embedded in the further portable device, 

compares the first sequence number to the second sequent number, the first 
sequence number being indicative of a the first trusted time provided on the 
portable devioe, the second sequence number being indicative of a-thc second 
trusted timft provided on the further portable device, an d 
executes one of the following actions: 

if the first trusted time is older than the aecond trusted time, sets the first 
sequence number to have a value of the second sequence number; end 
conversely, 

if the second trusted time Is older than the first trusted time, sets the 
second sequence number to have a value of the first sequence number so 
that the older trusted time information embedded on one of two portable 
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devices is mutually replaced with the newer trusted time information 
embedded on the other portable device. 

38. The portable device according to claim 37, wherein, if the first time is not equal to the 
noond time, the processing device ,-xrcutes a particular action which * trigged by at least one 
of the first sequence number and the second sequence number. 

3 9. The portable device accruing to claim 3 7, 

wherein the portable device is a smart card, aid the further portable device is a fisher 

Smart card, and 

wherein, after the execution of the particular action and if the first time is not equal to ft* 
second time, the processing device performs a transaction between the smart card and fte further 

smart card. 

40. The portable device according to claim 37, 

wherein the portable devio. is a smart card, and the further portable device is a further 
smart card, and - 

wherein, if the first time is equal to the nood time, the procuring device performs a 
transaction between the smart card and the further smart card. 

41. A method for determining an approximate current tuns using a first portable device and a 
second portable device, the first portable device having a fir* storage device, the second portable 
dev 1Ce having 8 . second storage device, the first storage device storing thereon a first sequence 
nurnh* and a first key, the second stooge device storing thereon a second sequence number and 
a second key, wherein the ft* and second sequence numWs comprise information on a first and 
a second Trusted time embedded in the respective storage devices, the method comprising th e 
strps of: 

comparing the first sequence number to the second sequence number, the first 
sequence number being indicative of. the ft* trusted time provided on the fir* portable device, 
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the second sequence number being indicative of a the second trusted time provided on the second 
portable device; 

if the second trusted time is newer than the first trusted time, 
performing a verification using at least one of the first and second keys; and 

setting the first. .<r.qucnce number to have a value of the .second sequence number 
if the verification, succeeds; and conversely, 

if the first trusted time is newer than the second trusted time, performing a 
verification using nt least one of the first and second keys; and 

setting the second sequence number to have a value of the first sequence number 
if the verification succeeds so that th* older trusted time information embedded on one of two 
portable devices is mutually replaced with the newer trusted time information embedded on the 
other portable device. 

42. The method according to claim 41, further comprising the steps of: 

generating the cryptograms by one of the first portable device and fh* second 
portable device; and 

verifying the cryptograms using another one. of the first portable device and the 
second portable device. 

43. The method according to claim 41, wherein tte first key is a first global signing key, and 
the second key is a global signing key, and wherein the verification is performed by comparing 
at least one first portion of the first global signing key to at h*st one second portion of the 
second global signing key. 

44. The method hording to claim 43, wherein the verification succeeds when the at least 
one first portion corresponds to the at least one second portion. 

45. The method according to claim 43, wherein each of the first and second global signing 
keys includes a private key and a public fa*, and wherein the verification i, performed using the 
respective public keys . 
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46. The method according to claim 41, wherein the first portable dcvir* is a first card, and 
the second portable device, is a second card, and further comprising the step oft 

after the setting str P , performing a transaction between the first card and the 

second card. 

47. The method according to claim 41, wherein the first portable device is a first card, and 
the second portable device is a second card, and further comprising the step of: 

if the verification fails, winding atransaction between the first, card and the 

second card. 

48. The method according to claim 41, further comprising the step of: 

if the verification fails, recording a failure of the verification in at least one of the 
first storage device and the second storage device. 

49. The method according to claim 41, wherein the first portable device is a first card, and 
the second portable device is a second card, and further comprising the step of: 

if the first time and the second time are equal, performing a transaction between 
the firart card and the second card 

50. Tbe method according to claim 4 1 , 

wherein the first portable device is a first card and the second portable device is a «*ond 

card, 

wherein the netting step is performed by transmitting an authenticated system message 
command from the second card to the first card, and 

wherein at least one of the first and second cards sets the second sequence number. 
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51. The method according to claim 41, herein the first key is a first global signing key, and 
the second key is a global signing key, and wherein the first global signing key relates to the first 
sequence .umher, and the second global signing key relates to the second sequence number. 

52. The method horning to claim 41, wherein the first key is a fir* global signing key, and 
the second key is a global signing key. and wWi D the first global signing key is related with 
a first value tranrfer protocol (W) key, and the second global aiding key is associated with 
a second VTP key, the first VTP key being stored in the first storage device, the second VTP key 
being stored in the second storage device. 

53. The method according to claim 41 , wherein each of the first portable device and the 
*<xond portable device includes a processing device. 

54. A portable device which is capable of dct«rroning an approximate current time during a 
communication with a further portable device, comprising: 

a storage devir* storing afirs t sequence number and » first key wherein the first sequence 
number comprises information- on a fir* trusted time embedded in the storage device; and 
a processing devioe performing the following: 

receives a second sequence number and a second key from the further portable 

device wherein the second sequence number comprises information i, a sec0 nd 

trusted time embedded in the further portable device, 

compares the first sequence number to the. second sequence number, the first 

sequence number being indicative 0 f the first trusted time provided on The 

portable tfcvice, the second sequence number being indicative of the second 

trusted time provided on the further portable device, 

if the second trusted time is newer than the first trusted time, performs a 

verification using the first and second keys, and scts the sequefl ce number to 

have a value of the 9eC ond sequence number if the verification succeeds; and 

conversely, 
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if the first trusted time is newer than the «=c.ond trusted time, performs a 
verification using the first and second keys, and scts the second sequence number to have a value 
of the first sequence number if the verification succeeds so that fta older tnmed time 
information embedded on one of two portable devices » mutually replaced with the . 
trusted time information embedded on the other portable device. 



: twwer 



55. The portahl, device according to claim 54, wherein, if the verification fails the 
proce 5 ,ine device suspends the traction with the further portable device, and records a failure 

of the verification. 



56. The portable device according to claim 54, herein, if the first sequence number and the 
second sequence numhe, are equal, the proving device performs the transaction with the 
further portahle device. 

57. The portable device according to chum 54, wherein the portable device i S a M card, 
and wherein the further portable device is a further smart card. 

«• The portable device according to claim 54, wherein the fust key is a first, global signing 
key and the second key is a second global signing key. 
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None. 
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